www.pigiami.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:b9:57:98:d5:9a:68:15:c8:84:8a:b5:90:2d:4b:29:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pigiami.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:b9:57:98:d5:9a:68:15:c8:84:8a:b5:90:2d:4b:29:8e
Serial Number (int): 270090278977200748386205481162744632387982
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:a7:2a:e4:8a:85:38:ee:e8:2f:22:f5:51:6d:b9:8a:59:81:a2:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:ed:d5:86:a5:9e:f7:57:7b:3d:e9:58:73:03:c2:0e:86:40:f0:93
Fingerprint (sha256): 68:76:17:3d:68:a7:d8:6f:67:b5:9f:29:d9:ce:88:dd:61:e6:5f:3a:c1:77:ea:44:35:5e:3e:ab:11:d8:48:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pigiami.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pigiami.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pigiami.com

Other certificates including the domain name pigiami.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pigiami.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270090278977200748386205481162744632387982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 14:51:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 14:51:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pigiami.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759387464117386621790229794721113903155541296951275026120821502857034818692344562692313021288020562214497859763725504803331505716555182355800834248248398207811797648945788155284523989815455427982949091870658537011017204680621319860343096482049698883744100620578725135219444488607926260728165433376583947669144934301264444068627006911756745682578425479002113946216730571944436188085343903979075684305989842688736521189840099906503329325636923707565252343709763603150812146892407374142803982495024733147552499252370797397458586832113841395850886689469288394090329644647022028263597629347077429728107170443386597632347136359272547449125971699239572374074267968641464173017197449315523795392623096549477189109818301101286958314795751515925692941304975419927980507048103117268556051559366765407439431728273475892732148006723888099909473726966666995211254553114935118367506954862500971792609785590244457892120685060194395667599979331888551215080102256636182218916680459332866216808330885862694193822738236938915348017132482453967994325613813346627578385566807407140404348584470969572379997797308098009436750352169967196425507690756630037059976183897359635868028687413954849712415195755626452685894309544198852537989965764800740882307787931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9a72ae48a8538eee82f22f5516db98a5981a2b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pigiami.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec74f41f40000040300483046022100814c7c2b7d2c762d69e92516d09cbb1644ca85b2b441379bc401d70aace601da022100a9869c678e8f7ce8bbacb83c1200bb4ab1a7a494eb67c4318a04163aa5da22840076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ec74f42250000040300473045022100815221a64740de3e3c04133b64d18916b592b38377a8ad1907b4f07d2d2d5c3c0220081165948a10b3e4f0c23a9aa9179561f949e81c4ab5e986189ff114025c9152
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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